Bug 777696 (SOA-211) - jUDDI index.html - lists inquiry and post servlets
Summary: jUDDI index.html - lists inquiry and post servlets
Keywords:
Status: CLOSED WONTFIX
Alias: SOA-211
Product: JBoss Enterprise SOA Platform 4
Classification: JBoss
Component: Security
Version: 4.2 IR7
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: 4.3 GA
Assignee: Mike Brock
QA Contact:
URL: http://jira.jboss.org/jira/browse/SOA...
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2007-12-04 18:59 UTC by Len DiMaggio
Modified: 2013-06-17 05:11 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
soa-4.2.0-IR7.0.zip
Last Closed: 2008-09-29 11:57:36 UTC
Type: Bug

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 778392 0 medium CLOSED jUDDI index.html - lists inquiry and post servlets 2021-02-22 00:41:40 UTC
Red Hat Issue Tracker SOA-211 0 None None None Never

Internal Links: 778392

Description Len DiMaggio 2007-12-04 18:59:58 UTC 
Date of First Response: 2008-08-07 11:06:17
project_key: SOA

This issue was originally logged as part of SOA-188

Description of problem:
The index.html file (server/*/deploy/juddi-service.sar/juddi.war/index.html) - http://hostname:8080/juddi/ displays inquiry and port servlets.

Version-Release number of selected component (IR or RC #, component ver)
soa-4.2.0-IR7.0.zip
How reproducible:
100%

Steps to Reproduce: 
1. Start up the server - go to host:8080/juddi

Actual results:

===========================
Welcome to JBoss JUDDI
This webapp accepts POST requests to:
/inquiry
/publish
===========================

Expected results:
A blank dispay would be better.

I'd recommend removing this text. It really doesn't add much security, but why advertise these servlets?

Additional info: (e.g., stack trace):

Attachments (e.g., server log):
Comment 1 Mike Brock 2008-08-07 15:06:17 UTC 
Don't really see the justification in proceeding with this.
Comment 2 nwallace 2008-09-26 06:40:30 UTC 
Link: Added: This issue related SOA-876
Note You need to log in before you can comment on or make changes to this bug.